@kitman-sh/cli 0.10.78 → 0.10.79

package/dist/{chunk-697qeg1j.js → chunk-04h76486.js}

@@ -4,9 +4,9 @@ import {
   runnerRpcUrl2,
   makeRunnerRpcClient2,
   makeProgramRpcClient2
-} from "./chunk-nnq8d7k0.js";
-import"./chunk-cn6h21ar.js";
-import"./chunk-g4j97dv5.js";
+} from "./chunk-774x1zm9.js";
+import"./chunk-5mafe4g9.js";
+import"./chunk-0znt4wky.js";
 import"./chunk-545b129z.js";
 import"./chunk-tzz4fv17.js";
 import"./chunk-xb70ys3n.js";

package/dist/{chunk-g4j97dv5.js → chunk-0znt4wky.js}

@@ -6456,6 +6456,7 @@ var RunList = Struct({
   items: ArraySchema(RunListItem),
   next: optionalKey(String4)
 });
+var RunWaitUntils = ["attention", "finished"];
 var RunWaitReasons = ["question", "completed", "failed", "stopped", "timeout"];
 var RunWaitResult = Struct({
   reason: Literals(RunWaitReasons),
@@ -15601,4 +15602,4 @@ function checkServices(declaration) {
   return isSome(decoded) ? [...new Set(decoded.value.services)] : undefined;
 }
 
-export { Clock, currentTimeMillis, WebCrypto, SecureRandom, layerWebCrypto, makeUnsafe, formatIso, empty, fromInput, merge, runMain, layer, layer2, Stdio, Terminal, layer3, error, log, toDate, parseDate, toIso, currentDate, wallClockMillis, waitingOnWords, queueWords, scanDurableSurface, redactResponseSurface, redactCredentials, redactedOutputTail, SafeJson, AgentHarnessIds, AgentSkillRequirement, AgentMcpServerRequirement, AgentEnvironmentFragment, findForbiddenAgentEnvironmentSecretPath, RepoBindingProviders, RepoBindingCredentialProviderTypes, findForbiddenRepoBindingSecretPath, AgentSandboxNetwork, runnerAgentSandboxPolicy, agentNetworkAllowlist, verificationNetworkAllowlist, programNetworkHosts, ContextPackModes, DefaultContextPackMode, ProposalStatuses, ProposalTargetTypes, canonicalJson, canonicalSha256, AgentEfforts, AgentCapabilities, LoopDataSchemaRef, RunDisplayStates, LoopVersion, ProgramLoop, AgentFallback, isTestReportName, checkTests, ProgramWorkUnit, MeasureSample, MeasureEvidence, catchUpPathLimit, CatchUp, RunnerOwnership, defaultRunnerCapabilities, MemoryStatuses, MemoryScopes, MaxMemoryListLimit, DecisionStatuses, Session, SessionEnd, SessionUpdate, SessionUpdateCreate, FixFlowRecoveryActions, KitmanAgentCapabilityNames, sha2562, isRunFileRefusalReason, runFileRefusalWords, RunFileRefused, runFileContentType, repositoryKey, createId, digestSha256, digestSha512, digestWith, sha256Hasher, AgentEvent, raw, make5, get, post, put, setHeaders, acceptJson, bodyUint8Array, bodyJsonUnsafe, bodyUrlParams, schemaBodyJson, filterStatusOk, HttpClient, execute, get2, Fetch, layer4, Socket, SocketReadError, SocketError, WebSocketConstructor, layerWebSocketConstructorGlobal, layerWebSocket, runDisplayLabels, listedSummary, KitName, KitDigest, defaultKitName, KitSetup, SetupArchive, kitMcpSecretNames, kitmanMcpServer, KitmanClientError, KitmanEffectClient, CliError, DefaultApiUrl, resolveConfig, apiUrlFromEnv, stepCredentialFromEnv, stepWorkspaceFromEnv, stepSkillsDirFromEnv, stepFittingSkillsFromEnv, stepOutputOnlyFromEnv, mcpCredentialNameFromEnv, userConfigPath, userAuthPath, userHarnessSyncPath, kitSetupCacheDir, bundleCacheDir, localConfigPath, readUserConfig, writeUserConfig, sessionForApi, readAuthStore, storeSession, removeSession, removeAllSessions, agentCredentialForApi, storeAgentCredential, removeAgentCredential, normalizeApiUrl, isStoredAgentCredential, isStreamSchema, getStreamSchemas, make6, exitSchema, ParseOptions, RpcClientDefect, RpcClientError, make7, Service, RunnerHeaders, RunnerRpcProtocolVersion, RunnerRpcError, RunSettled, UpdateAvailable, RunnerReplicaRpcs, RunnerRunFileRpcs, ProgramRpcs, parseCallbackUrl, revokeToken, toStoredSession, browserLogin, openBrowser, shouldRefresh, createSdkClient, refreshSession, AgentAuthClientError, executeAgentCapability, createAgentAuthBearerToken, McpPlatformLive, runMcpEffect, createAgentAuthSignedFetch, setupMcpAgentCredential, generateAgentKeyPair, HERDR_CORE_GENERATION2, HERDR_CORE_INSTALL_COMMAND2, HerdrCoreMissing2, HerdrCoreIncompatible2, HerdrCoreConnectionLost2, HerdrCoreRpcError2, HerdrCoreUpdateFailed2, HerdrCore2, herdrCoreLayer2, herdrCoreTransportLayer2, updateHerdrCore2, CommandFailed2, runCommand2, withoutPreloads2, shellOutputTailChars2, runProcess2, CommandRunner2, runShell2, detectHarnesses2, kitHarnesses, isKitHarness, instructionsStart, instructionsEnd, harnessNames, renderMcpServer, materializeKitSetup, tomlInline, herdrExecutionExtension2, herdrNativeExtensionIds2, herdrRunnerCapabilitiesForRepoBinding2, herdrRunnerCapabilities2, assertHerdrRunnerCapability2, declaredChecks, installCommand, checkServicesFile, checkServices };
+export { Clock, currentTimeMillis, WebCrypto, SecureRandom, layerWebCrypto, makeUnsafe, formatIso, empty, fromInput, merge, runMain, layer, layer2, Stdio, Terminal, layer3, error, log, toDate, parseDate, toIso, currentDate, wallClockMillis, waitingOnWords, queueWords, scanDurableSurface, redactResponseSurface, redactCredentials, redactedOutputTail, SafeJson, AgentHarnessIds, AgentSkillRequirement, AgentMcpServerRequirement, AgentEnvironmentFragment, findForbiddenAgentEnvironmentSecretPath, RepoBindingProviders, RepoBindingCredentialProviderTypes, findForbiddenRepoBindingSecretPath, AgentSandboxNetwork, runnerAgentSandboxPolicy, agentNetworkAllowlist, verificationNetworkAllowlist, programNetworkHosts, ContextPackModes, DefaultContextPackMode, ProposalStatuses, ProposalTargetTypes, canonicalJson, canonicalSha256, AgentEfforts, AgentCapabilities, LoopDataSchemaRef, RunDisplayStates, LoopVersion, ProgramLoop, AgentFallback, RunWaitUntils, isTestReportName, checkTests, ProgramWorkUnit, MeasureSample, MeasureEvidence, catchUpPathLimit, CatchUp, RunnerOwnership, defaultRunnerCapabilities, MemoryStatuses, MemoryScopes, MaxMemoryListLimit, DecisionStatuses, Session, SessionEnd, SessionUpdate, SessionUpdateCreate, FixFlowRecoveryActions, KitmanAgentCapabilityNames, sha2562, isRunFileRefusalReason, runFileRefusalWords, RunFileRefused, runFileContentType, repositoryKey, createId, digestSha256, digestSha512, digestWith, sha256Hasher, AgentEvent, raw, make5, get, post, put, setHeaders, acceptJson, bodyUint8Array, bodyJsonUnsafe, bodyUrlParams, schemaBodyJson, filterStatusOk, HttpClient, execute, get2, Fetch, layer4, Socket, SocketReadError, SocketError, WebSocketConstructor, layerWebSocketConstructorGlobal, layerWebSocket, runDisplayLabels, listedSummary, KitName, KitDigest, defaultKitName, KitSetup, SetupArchive, kitMcpSecretNames, kitmanMcpServer, KitmanClientError, KitmanEffectClient, CliError, DefaultApiUrl, resolveConfig, apiUrlFromEnv, stepCredentialFromEnv, stepWorkspaceFromEnv, stepSkillsDirFromEnv, stepFittingSkillsFromEnv, stepOutputOnlyFromEnv, mcpCredentialNameFromEnv, userConfigPath, userAuthPath, userHarnessSyncPath, kitSetupCacheDir, bundleCacheDir, localConfigPath, readUserConfig, writeUserConfig, sessionForApi, readAuthStore, storeSession, removeSession, removeAllSessions, agentCredentialForApi, storeAgentCredential, removeAgentCredential, normalizeApiUrl, isStoredAgentCredential, isStreamSchema, getStreamSchemas, make6, exitSchema, ParseOptions, RpcClientDefect, RpcClientError, make7, Service, RunnerHeaders, RunnerRpcProtocolVersion, RunnerRpcError, RunSettled, UpdateAvailable, RunnerReplicaRpcs, RunnerRunFileRpcs, ProgramRpcs, parseCallbackUrl, revokeToken, toStoredSession, browserLogin, openBrowser, shouldRefresh, createSdkClient, refreshSession, AgentAuthClientError, executeAgentCapability, createAgentAuthBearerToken, McpPlatformLive, runMcpEffect, createAgentAuthSignedFetch, setupMcpAgentCredential, generateAgentKeyPair, HERDR_CORE_GENERATION2, HERDR_CORE_INSTALL_COMMAND2, HerdrCoreMissing2, HerdrCoreIncompatible2, HerdrCoreConnectionLost2, HerdrCoreRpcError2, HerdrCoreUpdateFailed2, HerdrCore2, herdrCoreLayer2, herdrCoreTransportLayer2, updateHerdrCore2, CommandFailed2, runCommand2, withoutPreloads2, shellOutputTailChars2, runProcess2, CommandRunner2, runShell2, detectHarnesses2, kitHarnesses, isKitHarness, instructionsStart, instructionsEnd, harnessNames, renderMcpServer, materializeKitSetup, tomlInline, herdrExecutionExtension2, herdrNativeExtensionIds2, herdrRunnerCapabilitiesForRepoBinding2, herdrRunnerCapabilities2, assertHerdrRunnerCapability2, declaredChecks, installCommand, checkServicesFile, checkServices };

package/dist/{chunk-cn6h21ar.js → chunk-5mafe4g9.js}

@@ -123,7 +123,7 @@ import {
   ParseOptions,
   RpcClientDefect,
   RpcClientError
-} from "./chunk-g4j97dv5.js";
+} from "./chunk-0znt4wky.js";
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/workers/Transferable.js
 class Collector extends (/* @__PURE__ */ Service2()("effect/workers/Transferable/Collector")) {

package/dist/{chunk-nnq8d7k0.js → chunk-774x1zm9.js}

@@ -19,13 +19,13 @@ import {
   RunnerReplicaRpcs,
   RunnerRunFileRpcs,
   ProgramRpcs
-} from "./chunk-g4j97dv5.js";
+} from "./chunk-0znt4wky.js";
 import {
   layerJson,
   make4,
   withHeaders,
   layerProtocolSocket
-} from "./chunk-cn6h21ar.js";
+} from "./chunk-5mafe4g9.js";
 
 // packages/live/src/rpc/runner-client.ts
 var proxiedWebSocket = (proxy) => succeed5(WebSocketConstructor)((target) => {

package/dist/{chunk-whyjvrf2.js → chunk-agmt5yte.js}

@@ -243,7 +243,7 @@ import {
   installCommand,
   checkServicesFile,
   checkServices
-} from "./chunk-g4j97dv5.js";
+} from "./chunk-0znt4wky.js";
 import {
   join,
   interrupt,
@@ -299,8 +299,8 @@ import {
   applyAgentEnvironmentMaterialization2,
   isPathWithin2,
   skillIdentity2
-} from "./chunk-bqpj1be3.js";
-import"./chunk-qbsqc416.js";
+} from "./chunk-wq91rwr2.js";
+import"./chunk-gntbq9g8.js";
 import {
   egressAllowed,
   writeSecretRegistry,
@@ -325,8 +325,8 @@ import {
   rpcRunFiles,
   programHostsEnv,
   undeclaredHostsEnv
-} from "./chunk-6h16wtxk.js";
-import"./chunk-nnq8d7k0.js";
+} from "./chunk-r3240g3z.js";
+import"./chunk-774x1zm9.js";
 import {
   nextInt
 } from "./chunk-76ctrqm6.js";
@@ -334,7 +334,7 @@ import {
   ChildProcessSpawner,
   make3
 } from "./chunk-98sg1yyd.js";
-import"./chunk-cn6h21ar.js";
+import"./chunk-5mafe4g9.js";
 
 // packages/core/src/sync-kit.ts
 import { createHash } from "crypto";

package/dist/{chunk-k0bjhj9m.js → chunk-ambnfp64.js}

@@ -26,15 +26,15 @@ import {
   tomlKeyPath2,
   kitmanSkillEntry,
   isPathWithin2
-} from "./chunk-bqpj1be3.js";
+} from "./chunk-wq91rwr2.js";
 import {
   instructionsStart,
   instructionsEnd,
   renderMcpServer,
   materializeKitSetup,
   tomlInline
-} from "./chunk-g4j97dv5.js";
-import"./chunk-qbsqc416.js";
+} from "./chunk-0znt4wky.js";
+import"./chunk-gntbq9g8.js";
 import"./chunk-98sg1yyd.js";
 
 // packages/agent-runtime/src/kit-setup-sync.ts

package/dist/{chunk-apjzbve5.js → chunk-fh762fzy.js}

@@ -114,6 +114,7 @@ import {
   scanDurableSurface,
   redactResponseSurface,
   canonicalSha256,
+  RunWaitUntils,
   RunnerOwnership,
   Session,
   SessionEnd,
@@ -153,7 +154,7 @@ import {
   runMcpEffect,
   createAgentAuthSignedFetch,
   setupMcpAgentCredential
-} from "./chunk-g4j97dv5.js";
+} from "./chunk-0znt4wky.js";
 import {
   guard,
   Id,
@@ -197,7 +198,7 @@ import {
   withHeaders,
   layerProtocolSocket,
   ConnectionHooks
-} from "./chunk-cn6h21ar.js";
+} from "./chunk-5mafe4g9.js";
 
 // apps/cli/src/mcp.ts
 import { tmpdir } from "os";
@@ -3822,7 +3823,7 @@ var operationSpecs = [
     parameters: ["runId", ["options", false]],
     namespacePath: ["runs", "wait"],
     tags: ["runs"],
-    summary: "Wait until the Run needs attention (an open Question) or settles; `until: finished` ignores Questions. Returns reason `timeout` after `timeoutSeconds` (at most 8); call again to keep waiting."
+    summary: "Wait until the Run needs attention (an open Question) or settles; `until: finished` ignores Questions. Returns reason `timeout` after `timeoutSeconds` (at most 8); call again to keep waiting, or use the `wait_run` MCP tool to wait in one call."
   },
   {
     name: "answerRun",
@@ -5655,6 +5656,86 @@ function positiveInteger(value, label) {
   return value;
 }
 
+// apps/mcp/src/run-wait-tool.ts
+var RunWaitMaxSeconds = 8;
+var runWaiterFromOperations = (dispatch) => (request) => dispatch("waitRun", {
+  runId: request.runId,
+  options: { until: request.until, timeoutSeconds: request.timeoutSeconds }
+});
+var WaitRunInputSchema = {
+  type: "object",
+  required: ["run"],
+  additionalProperties: false,
+  properties: {
+    run: { type: "string", minLength: 1, description: "The Run\u2019s id." },
+    until: {
+      type: "string",
+      enum: [...RunWaitUntils],
+      description: "`attention` (default) returns on an open Question or when the Run settles; `finished` only when it settles."
+    },
+    timeoutSeconds: {
+      type: "number",
+      minimum: 0,
+      description: "Return reason `timeout` once this many seconds pass. Leave out to wait as long as the Run takes."
+    }
+  }
+};
+var ToolOutputSchema = { type: "object", additionalProperties: true };
+function registerWaitRunTool(server, adapt, waitOnce) {
+  server.registerTool("wait_run", {
+    description: 'Wait on a Run, as `kitman run wait` does, until it needs attention (an open Question) or settles; `until: "finished"` ignores Questions. Returns `{ reason, run, questions }` with reason question, completed, failed, stopped, or timeout once `timeoutSeconds` passes. Use it instead of looping `runs.wait` in `execute`.',
+    inputSchema: adapt(WaitRunInputSchema),
+    outputSchema: adapt(ToolOutputSchema),
+    annotations: { readOnlyHint: true, idempotentHint: true }
+  }, (args, context) => runMcpEffect(gen(function* () {
+    if (waitOnce === undefined)
+      return yield* new McpToolInputError({ message: "wait_run requires a Kitman API connection." });
+    return formatMcpToolSuccess("wait_run", yield* waitRun(waitOnce, yield* waitInput(args), context));
+  }).pipe(catch_((error) => succeed6(formatMcpToolError(error))))));
+}
+var waitRun = (waitOnce, input, context) => gen(function* () {
+  const deadline = (yield* currentTimeMillis) + input.timeoutMillis;
+  const progressToken = context?.mcpReq?._meta?.progressToken;
+  let rounds = 0;
+  while (true) {
+    const remainingMillis = Math.max(0, deadline - (yield* currentTimeMillis));
+    const waited = yield* waitOnce({
+      runId: input.runId,
+      until: input.until,
+      timeoutSeconds: Math.min(RunWaitMaxSeconds, remainingMillis / 1000)
+    });
+    rounds += 1;
+    if (reasonOf(waited) !== "timeout")
+      return waited;
+    if ((yield* currentTimeMillis) >= deadline || context?.mcpReq?.signal.aborted === true)
+      return waited;
+    if (progressToken !== undefined && context?.mcpReq !== undefined)
+      yield* promise(() => context.mcpReq.notify({
+        method: "notifications/progress",
+        params: { progressToken, progress: rounds, message: `Run ${input.runId} is ${runStatusOf(waited)}` }
+      }));
+  }
+});
+var waitInput = (args) => gen(function* () {
+  const { run, until = "attention", timeoutSeconds } = args;
+  if (!isString(run) || run.length === 0)
+    return yield* new McpToolInputError({ message: "run is required." });
+  if (!isOneOf(RunWaitUntils, until))
+    return yield* new McpToolInputError({ message: `until must be ${RunWaitUntils.join(" or ")}.` });
+  if (timeoutSeconds !== undefined && (!isNumber(timeoutSeconds) || timeoutSeconds < 0))
+    return yield* new McpToolInputError({ message: "timeoutSeconds must be a number of seconds, 0 or more." });
+  return {
+    runId: run,
+    until,
+    timeoutMillis: timeoutSeconds === undefined ? Number.POSITIVE_INFINITY : timeoutSeconds * 1000
+  };
+});
+var reasonOf = (waited) => isJsonObject(waited) ? waited.reason : undefined;
+var runStatusOf = (waited) => {
+  const run = isJsonObject(waited) ? waited.run : undefined;
+  return isJsonObject(run) && isString(run.status) ? run.status : "still running";
+};
+
 // apps/mcp/src/code-mode.ts
 var SkillsInputSchema = {
   type: "object",
@@ -5683,7 +5764,7 @@ var ExecuteInputSchema = {
     reason: { type: "string", minLength: 1 }
   }
 };
-var ToolOutputSchema = {
+var ToolOutputSchema2 = {
   type: "object",
   additionalProperties: true
 };
@@ -5786,7 +5867,7 @@ function registerCodeModeTools(server, options = {}) {
     ].join(`
 `),
     inputSchema: adapt(ExecuteInputSchema),
-    outputSchema: adapt(ToolOutputSchema),
+    outputSchema: adapt(ToolOutputSchema2),
     annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false }
   }, (args) => runMcpEffect(gen(function* () {
     const reason = yield* optionalStringArg(args, "reason");
@@ -5800,7 +5881,7 @@ function registerCodeModeTools(server, options = {}) {
   server.registerTool("skills", {
     description: 'Fetch an on-demand Code Mode skill. Call with no name to list skills; call with name "execute" before using execute.',
     inputSchema: adapt(SkillsInputSchema),
-    outputSchema: adapt(ToolOutputSchema),
+    outputSchema: adapt(ToolOutputSchema2),
     annotations: { readOnlyHint: true, idempotentHint: true }
   }, (args) => runMcpEffect(gen(function* () {
     const name = yield* optionalStringArg(args, "name");
@@ -5814,9 +5895,10 @@ function registerCodeModeTools(server, options = {}) {
   server.registerTool("resume", {
     description: "Resume a paused Code Mode execution. If the execution is unknown, expired, forbidden, or already settled, a structured unavailable status is returned.",
     inputSchema: adapt(ResumeInputSchema),
-    outputSchema: adapt(ToolOutputSchema),
+    outputSchema: adapt(ToolOutputSchema2),
     annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true }
   }, (args) => runMcpEffect(resumeExecution(args).pipe(catch_((error) => succeed6(formatMcpToolError(error))))));
+  registerWaitRunTool(server, adapt, options.waitRun ?? (dispatchOperation === undefined ? undefined : runWaiterFromOperations(dispatchOperation)));
   function resumeExecution(args) {
     return gen(function* () {
       let executionId = yield* optionalStringArg(args, "executionId");
@@ -7365,6 +7447,7 @@ function createKitmanMcpServer(options = {}) {
     ...options.adaptJsonSchema ? { adaptJsonSchema: options.adaptJsonSchema } : undefined,
     ...executeCapability ? { executeCapability } : undefined,
     ...codeModeDispatchOperation ? { dispatchOperation: codeModeDispatchOperation, operations: CodeModeOperationDescriptors } : undefined,
+    ...options.waitRun ? { waitRun: options.waitRun } : undefined,
     prepareOperationInput: codeModePrepareOperationInput,
     ...options.executionStore ? { executionStore: options.executionStore } : undefined,
     ...options.executionOwner ? { executionOwner: options.executionOwner } : undefined,
@@ -7379,6 +7462,7 @@ function registerKitmanCodeModeTools(server, options = {}) {
     adaptJsonSchema: options.adaptJsonSchema ?? defaultSchemaAdapter,
     ...options.executeCapability ? { executeCapability: options.executeCapability } : undefined,
     ...options.dispatchOperation ? { dispatchOperation: options.dispatchOperation } : undefined,
+    ...options.waitRun ? { waitRun: options.waitRun } : undefined,
     ...options.prepareOperationInput ? { prepareOperationInput: options.prepareOperationInput } : undefined,
     ...options.operations ? { operations: options.operations } : undefined,
     ...options.executionStore ? { executionStore: options.executionStore } : undefined,

package/dist/{chunk-qbsqc416.js → chunk-gntbq9g8.js}

@@ -38,7 +38,7 @@ import {
   get2,
   layer4,
   KitDigest
-} from "./chunk-g4j97dv5.js";
+} from "./chunk-0znt4wky.js";
 
 // packages/core/src/npm-registry.ts
 var KitManifest = Struct({

package/dist/{chunk-5sdw5ws3.js → chunk-kvv8n1nq.js}

@@ -12,7 +12,7 @@ import {
   herdrCoreLayer2,
   herdrCoreTransportLayer2,
   updateHerdrCore2
-} from "./chunk-g4j97dv5.js";
+} from "./chunk-0znt4wky.js";
 import"./chunk-xb70ys3n.js";
 import"./chunk-jbwk6k6m.js";
 export {

package/dist/{chunk-bj8jqwk3.js → chunk-msejjzvq.js}

@@ -35,14 +35,6 @@ import {
 } from "./chunk-jbwk6k6m.js";
 import"./chunk-545b129z.js";
 import"./chunk-tzz4fv17.js";
-import {
-  decodeText,
-  mkString,
-  FileSystem,
-  Path,
-  withDefault,
-  String2
-} from "./chunk-xb70ys3n.js";
 import {
   SecureRandom,
   layerWebCrypto,
@@ -54,23 +46,31 @@ import {
   layer4,
   kitmanMcpServer,
   RunnerRpcProtocolVersion
-} from "./chunk-g4j97dv5.js";
+} from "./chunk-0znt4wky.js";
+import {
+  decodeText,
+  mkString,
+  FileSystem,
+  Path,
+  withDefault,
+  String2
+} from "./chunk-xb70ys3n.js";
 import {
   Packument,
   tarballMatches
-} from "./chunk-qbsqc416.js";
-import"./chunk-nnq8d7k0.js";
+} from "./chunk-gntbq9g8.js";
+import"./chunk-774x1zm9.js";
 import {
   AgentDeclaration,
   KitDeclarations,
   describeFlag,
   Described
-} from "./chunk-6h16wtxk.js";
+} from "./chunk-r3240g3z.js";
 import {
   ChildProcessSpawner,
   make3
 } from "./chunk-98sg1yyd.js";
-import"./chunk-cn6h21ar.js";
+import"./chunk-5mafe4g9.js";
 
 // packages/sdk/src/build/index.ts
 class DependencyInstallFailed extends TaggedError2()("DependencyInstallFailed", {

package/dist/{chunk-6h16wtxk.js → chunk-r3240g3z.js}

@@ -105,7 +105,7 @@ import {
   KitDigest,
   KitSetup,
   RunnerRpcError
-} from "./chunk-g4j97dv5.js";
+} from "./chunk-0znt4wky.js";
 import {
   runForEach,
   FileSystem

package/dist/{chunk-5aebee0q.js → chunk-vt7p2dqj.js}

@@ -197,7 +197,7 @@ import {
   harnessNames,
   herdrRunnerCapabilities2,
   declaredChecks
-} from "./chunk-g4j97dv5.js";
+} from "./chunk-0znt4wky.js";
 import {
   Id
 } from "./chunk-545b129z.js";
@@ -504,10 +504,10 @@ var checkDockerImageSetting = pinnedImage;
 var checkRegistryImageSetting = pinnedImage;
 var herdrCoreSession = (runnerId, personal) => personal ? undefined : `kitman-${sha2562(runnerId).slice(0, 16)}`;
 var OpenHerdrCore = Reference("kitman/cli/OpenHerdrCore", {
-  defaultValue: () => (options) => flatMap3(promise(() => import("./chunk-5sdw5ws3.js")), ({ HerdrCore, herdrCoreLayer }) => provide3(service(HerdrCore), herdrCoreLayer(options)))
+  defaultValue: () => (options) => flatMap3(promise(() => import("./chunk-kvv8n1nq.js")), ({ HerdrCore, herdrCoreLayer }) => provide3(service(HerdrCore), herdrCoreLayer(options)))
 });
 var UpdateHerdrCore = Reference("kitman/cli/UpdateHerdrCore", {
-  defaultValue: () => (options) => flatMap3(promise(() => import("./chunk-5sdw5ws3.js")), (module) => module.updateHerdrCore(options))
+  defaultValue: () => (options) => flatMap3(promise(() => import("./chunk-kvv8n1nq.js")), (module) => module.updateHerdrCore(options))
 });
 var herdrCoreMissing = (error) => {
   if (isTagged(error, "HerdrCoreMissing"))
@@ -733,7 +733,7 @@ var syncTargets = (harness) => gen(function* () {
 });
 var syncKits = (input) => gen(function* () {
   const fs = yield* FileSystem;
-  const { syncKitSetup } = yield* promise(() => import("./chunk-k0bjhj9m.js"));
+  const { syncKitSetup } = yield* promise(() => import("./chunk-ambnfp64.js"));
   const harnesses = yield* syncTargets(input.harness);
   const chain = yield* input.client.getKitChain(input.workspaceId);
   for (const { name, problem } of chain.skipped)
@@ -1651,7 +1651,7 @@ var package_default = {
 };
 
 // apps/cli/src/scaffold.ts
-var cliVersion = "0.10.78";
+var cliVersion = "0.10.79";
 var packageJson = (name, scaffold) => `${JSON.stringify({
   name,
   private: true,
@@ -1901,7 +1901,7 @@ var Usage = [
   "Every run, loop, agent, verify, constraint, secret, claim, deploy, dev and kit command takes --json."
 ].join(`
 `);
-var agentRuntime = promise(() => import("./chunk-whyjvrf2.js"));
+var agentRuntime = promise(() => import("./chunk-agmt5yte.js"));
 var TuiLauncher = Reference("kitman/cli/TuiLauncher", {
   defaultValue: () => gen(function* () {
     const tui = yield* tryPromise({
@@ -2777,7 +2777,7 @@ var SandboxHostProbe = Reference("kitman/cli/SandboxHostProbe", {
 });
 var OpenRunnerRpc = Reference("kitman/cli/OpenRunnerRpc", {
   defaultValue: () => (options) => gen(function* () {
-    const { makeRunnerRpcClient, runnerRpcUrl, runnerWebSocketProtocol } = yield* promise(() => import("./chunk-697qeg1j.js"));
+    const { makeRunnerRpcClient, runnerRpcUrl, runnerWebSocketProtocol } = yield* promise(() => import("./chunk-04h76486.js"));
     return yield* makeRunnerRpcClient({
       runnerId: options.runnerId,
       bearer: options.bearer,
@@ -3161,7 +3161,7 @@ function mcpCommand(args) {
     if (command.action === "run") {
       if (command.args.length > 0)
         return yield* new CliError({ message: `Unknown command: ${args.join(" ")}` });
-      const { runMcpServerCommand } = yield* promise(() => import("./chunk-apjzbve5.js"));
+      const { runMcpServerCommand } = yield* promise(() => import("./chunk-fh762fzy.js"));
       return yield* runMcpServerCommand({ flags: command.flags });
     }
     if (command.action !== "setup")
@@ -4372,9 +4372,9 @@ function claimCommand(args) {
     }
   });
 }
-var KitWriter = map8(promise(() => import("./chunk-bj8jqwk3.js")), (build) => build.writeKit);
+var KitWriter = map8(promise(() => import("./chunk-msejjzvq.js")), (build) => build.writeKit);
 var KitBuilder = Reference("kitman/cli/KitBuilder", {
-  defaultValue: () => (directory) => flatMap3(promise(() => import("./chunk-bj8jqwk3.js")), (build) => build.buildKit(directory))
+  defaultValue: () => (directory) => flatMap3(promise(() => import("./chunk-msejjzvq.js")), (build) => build.buildKit(directory))
 });
 var uploadKit = (client, workspaceId, built) => gen(function* () {
   yield* client.uploadKitBundle(workspaceId, built.digest, { bundle: encode2(built.bundle) });

package/dist/{chunk-bqpj1be3.js → chunk-wq91rwr2.js}

@@ -37,10 +37,10 @@ import {
   AgentHarnessIds,
   sha2562,
   runCommand2
-} from "./chunk-g4j97dv5.js";
+} from "./chunk-0znt4wky.js";
 import {
   NpmRegistry
-} from "./chunk-qbsqc416.js";
+} from "./chunk-gntbq9g8.js";
 
 // packages/agent-runtime/src/config-convergence.ts
 var writeAgentEnvironmentConfigFile2 = fnUntraced(function* (file, content, keep = {}) {
@@ -631,133 +631,7 @@ async ({ kitman }) => {
 }
 \`\`\`
 `,
-  "references/mcp-tools.md": `# Kitman Code Mode MCP
-
-Kitman MCP uses Code Mode as its only interface. The MCP context stays compact, but the reachable capability should match the public Kitman CLI/API when the authenticated Actor is authorized.
-
-## Default Tools
-
-Use these as the normal MCP entry points:
-
-- \`execute\`: execute JavaScript that calls typed \`kitman.*\` public operations through a host-side SDK/API proxy.
-- \`skills\`: fetch on-demand Code Mode guidance, especially \`skills({ name: "execute" })\`.
-- \`resume\`: resume paused approval or elicitation flows when the MCP session exposes it.
-
-## Auth, Grants, And Fallbacks
-
-Local MCP authenticates through a human-scoped DelegatedToolCredential created by \`kitman mcp setup --name <tool>\`. Hosted MCP resolves the hosted request ActorContext. Autonomous AgentIdentities authenticate as Agent Actors.
-
-The Code Mode sandbox must not receive AgentCredential private keys, bearer tokens, raw auth-store contents, runner secrets, or raw environment variables by default. The host signs SDK/API requests and Kitman Cloud enforces normal authorization, Team privacy, audit, Memory visibility, asset access, and admin checks.
-
-If Code Mode MCP lacks an operation that exists through the public CLI/API, record or report a Kitman MCP parity bug. Do not silently shell out to the CLI, call raw REST manually, create hidden local state, or keep local task files as a substitute.
-
-Use only customer-visible Kitman surfaces for operation discovery: MCP descriptors, CLI help, the Kitman skill, and published API docs. Do not inspect Kitman implementation source to learn operation names, schemas, or input shapes. If those surfaces do not provide enough detail, record a Kitman docs/discoverability blocker.
-
-## Team Context
-
-Repo-local \`.kitman/config.json\`, CWD, and Git remotes are hints, not canonical state. Kitman Cloud remains canonical for Workspace, Team, Task, RepoBinding, Session, and audit state.
-
-When the user asks for the current Team ID or Team context, use Code Mode MCP resolution before inspecting local files or searching the repository:
-
-\`\`\`execute
-async ({ kitman }) => await kitman.context.resolveTeam({})
-\`\`\`
-
-Answer from \`preferredTeamId\` and include \`workspaceId\` when useful. If resolution returns warnings or no unambiguous Team, report that result and ask only for the missing explicit ID needed to proceed.
-
-Local MCP may sanitize the nearest CWD Git \`origin\` remote to repository identity plus repository-relative path and ask Kitman Cloud to resolve authorized Team context from RepoBindings.
-
-Workspace and Team RepoBindings may describe a whole repository or a repository-relative \`pathPrefix\` for monorepos. A CWD inside a monorepo should resolve by longest matching path prefix. A CWD at a monorepo root can resolve to the Teams that own the repository for reads and live updates. Mutations still require one explicit or subpath-resolved Team.
-
-When a mutation is ambiguous, retry with explicit canonical IDs such as \`workspaceId\`, \`teamId\`, \`taskId\`, \`sessionId\`, \`dependencyId\`, or \`assetId\`.
-
-## Code Mode Patterns
-
-Search when you do not know the operation:
-
-\`\`\`execute
-const query = 'session update';
-return kitman.search({ query }).items
-  .map(({ name, summary, namespacePath, sdk, inputSchema, outputSchema, inputTypeScript, outputTypeScript, examples, auth, approvalPolicy }) => ({
-    name,
-    call: \`kitman.\${namespacePath.join('.')}({...})\`,
-    parameters: sdk.parameters,
-    inputSchema,
-    outputSchema,
-    inputTypeScript,
-    outputTypeScript,
-    examples,
-    auth,
-    approvalPolicy,
-    summary
-  }));
-\`\`\`
-
-Descriptor search snippets receive \`operations\` and its shorthand alias \`ops\` as the public operation catalog. The same catalog is searchable through \`kitman.search({ query })\`; no other descriptor globals are required.
-
-That descriptor output is the source of truth for Code Mode call shape. For example, if the descriptor says \`namespacePath: ['sessions', 'recordUpdate']\` and parameters \`sessionId\` and \`input\`, call \`kitman.sessions.recordUpdate({ sessionId, input })\` through \`execute\`.
-
-Execute related work through typed operations:
-
-\`\`\`execute
-async ({ kitman }) => {
-  const team = await kitman.teams.get({ workspaceId: 'workspace_123', teamId: 'team_123' });
-  if (!team.ok) return team.error;
-
-  const tasks = await kitman.tasks.list({ teamId: 'team_123', options: { statuses: ['ready', 'in_progress'] } });
-  if (!tasks.ok) return tasks.error;
-
-  return {
-    team: team.data,
-    tasks: tasks.data.items.map((task) => ({ id: task.id, teamId: task.teamId, title: task.title, status: task.status }))
-  };
-}
-\`\`\`
-
-Use one execution when the calls are tightly related, especially for read-filter-map flows or read-then-record workflows. Use separate executions when a human decision is needed between steps.
-
-Parallel calls are appropriate for independent reads:
-
-\`\`\`execute
-async ({ kitman }) => {
-  const [task, dependencies, sessions] = await Promise.all([
-    kitman.tasks.get({ taskId: 'task_123' }),
-    kitman.taskDependencies.list({ taskId: 'task_123' }),
-    kitman.sessions.listForTask({ taskId: 'task_123' })
-  ]);
-
-  return { task, dependencies, sessions };
-}
-\`\`\`
-
-## Required Work Discipline
-
-Use Code Mode operations to keep normal Kitman workflow discipline:
-
-- Resolve or identify the Task before starting work.
-- Read TaskDependencies for build order when relevant.
-- Generate or read the appropriate ContextPack before implementation or review work.
-- Record meaningful findings, decisions, blockers, test results, and file references as SessionUpdates or Task thread entries.
-- Propose Memory only when the learning is durable and reusable.
-- Link delivery artifacts such as merge requests with \`kitman.taskLinks.create\` and verify them with \`kitman.taskLinks.list\`.
-- Generate a handoff before stopping.
-
-## Safety Rules
-
-Never put these in Memory, SessionUpdates, handoffs, examples, or cloud audit metadata:
-
-- secrets,
-- private keys,
-- bearer tokens,
-- raw auth-store contents,
-- raw terminal logs,
-- raw source snapshots,
-- raw diffs,
-- private customer data,
-- presigned upload or download URLs.
-
-Do not use Code Mode to bypass Kitman authorization, Team privacy, human review, Memory approval, Proposal approval, or AgentIdentity lifecycle restrictions.
-`,
+  "references/mcp-tools.md": '# Kitman Code Mode MCP\n\nKitman MCP uses Code Mode as its only interface. The MCP context stays compact, but the reachable capability should match the public Kitman CLI/API when the authenticated Actor is authorized.\n\n## Default Tools\n\nUse these as the normal MCP entry points:\n\n- `execute`: execute JavaScript that calls typed `kitman.*` public operations through a host-side SDK/API proxy.\n- `skills`: fetch on-demand Code Mode guidance, especially `skills({ name: "execute" })`.\n- `resume`: resume paused approval or elicitation flows when the MCP session exposes it.\n- `wait_run`: wait on a Run until it needs attention or settles, in one call however long that takes; use it instead of looping `runs.wait` in `execute`.\n\n## Auth, Grants, And Fallbacks\n\nLocal MCP authenticates through a human-scoped DelegatedToolCredential created by `kitman mcp setup --name <tool>`. Hosted MCP resolves the hosted request ActorContext. Autonomous AgentIdentities authenticate as Agent Actors.\n\nThe Code Mode sandbox must not receive AgentCredential private keys, bearer tokens, raw auth-store contents, runner secrets, or raw environment variables by default. The host signs SDK/API requests and Kitman Cloud enforces normal authorization, Team privacy, audit, Memory visibility, asset access, and admin checks.\n\nIf Code Mode MCP lacks an operation that exists through the public CLI/API, record or report a Kitman MCP parity bug. Do not silently shell out to the CLI, call raw REST manually, create hidden local state, or keep local task files as a substitute.\n\nUse only customer-visible Kitman surfaces for operation discovery: MCP descriptors, CLI help, the Kitman skill, and published API docs. Do not inspect Kitman implementation source to learn operation names, schemas, or input shapes. If those surfaces do not provide enough detail, record a Kitman docs/discoverability blocker.\n\n## Team Context\n\nRepo-local `.kitman/config.json`, CWD, and Git remotes are hints, not canonical state. Kitman Cloud remains canonical for Workspace, Team, Task, RepoBinding, Session, and audit state.\n\nWhen the user asks for the current Team ID or Team context, use Code Mode MCP resolution before inspecting local files or searching the repository:\n\n```execute\nasync ({ kitman }) => await kitman.context.resolveTeam({})\n```\n\nAnswer from `preferredTeamId` and include `workspaceId` when useful. If resolution returns warnings or no unambiguous Team, report that result and ask only for the missing explicit ID needed to proceed.\n\nLocal MCP may sanitize the nearest CWD Git `origin` remote to repository identity plus repository-relative path and ask Kitman Cloud to resolve authorized Team context from RepoBindings.\n\nWorkspace and Team RepoBindings may describe a whole repository or a repository-relative `pathPrefix` for monorepos. A CWD inside a monorepo should resolve by longest matching path prefix. A CWD at a monorepo root can resolve to the Teams that own the repository for reads and live updates. Mutations still require one explicit or subpath-resolved Team.\n\nWhen a mutation is ambiguous, retry with explicit canonical IDs such as `workspaceId`, `teamId`, `taskId`, `sessionId`, `dependencyId`, or `assetId`.\n\n## Code Mode Patterns\n\nSearch when you do not know the operation:\n\n```execute\nconst query = \'session update\';\nreturn kitman.search({ query }).items\n  .map(({ name, summary, namespacePath, sdk, inputSchema, outputSchema, inputTypeScript, outputTypeScript, examples, auth, approvalPolicy }) => ({\n    name,\n    call: `kitman.${namespacePath.join(\'.\')}({...})`,\n    parameters: sdk.parameters,\n    inputSchema,\n    outputSchema,\n    inputTypeScript,\n    outputTypeScript,\n    examples,\n    auth,\n    approvalPolicy,\n    summary\n  }));\n```\n\nDescriptor search snippets receive `operations` and its shorthand alias `ops` as the public operation catalog. The same catalog is searchable through `kitman.search({ query })`; no other descriptor globals are required.\n\nThat descriptor output is the source of truth for Code Mode call shape. For example, if the descriptor says `namespacePath: [\'sessions\', \'recordUpdate\']` and parameters `sessionId` and `input`, call `kitman.sessions.recordUpdate({ sessionId, input })` through `execute`.\n\nExecute related work through typed operations:\n\n```execute\nasync ({ kitman }) => {\n  const team = await kitman.teams.get({ workspaceId: \'workspace_123\', teamId: \'team_123\' });\n  if (!team.ok) return team.error;\n\n  const tasks = await kitman.tasks.list({ teamId: \'team_123\', options: { statuses: [\'ready\', \'in_progress\'] } });\n  if (!tasks.ok) return tasks.error;\n\n  return {\n    team: team.data,\n    tasks: tasks.data.items.map((task) => ({ id: task.id, teamId: task.teamId, title: task.title, status: task.status }))\n  };\n}\n```\n\nUse one execution when the calls are tightly related, especially for read-filter-map flows or read-then-record workflows. Use separate executions when a human decision is needed between steps.\n\nParallel calls are appropriate for independent reads:\n\n```execute\nasync ({ kitman }) => {\n  const [task, dependencies, sessions] = await Promise.all([\n    kitman.tasks.get({ taskId: \'task_123\' }),\n    kitman.taskDependencies.list({ taskId: \'task_123\' }),\n    kitman.sessions.listForTask({ taskId: \'task_123\' })\n  ]);\n\n  return { task, dependencies, sessions };\n}\n```\n\n## Required Work Discipline\n\nUse Code Mode operations to keep normal Kitman workflow discipline:\n\n- Resolve or identify the Task before starting work.\n- Read TaskDependencies for build order when relevant.\n- Generate or read the appropriate ContextPack before implementation or review work.\n- Record meaningful findings, decisions, blockers, test results, and file references as SessionUpdates or Task thread entries.\n- Propose Memory only when the learning is durable and reusable.\n- Link delivery artifacts such as merge requests with `kitman.taskLinks.create` and verify them with `kitman.taskLinks.list`.\n- Generate a handoff before stopping.\n\n## Safety Rules\n\nNever put these in Memory, SessionUpdates, handoffs, examples, or cloud audit metadata:\n\n- secrets,\n- private keys,\n- bearer tokens,\n- raw auth-store contents,\n- raw terminal logs,\n- raw source snapshots,\n- raw diffs,\n- private customer data,\n- presigned upload or download URLs.\n\nDo not use Code Mode to bypass Kitman authorization, Team privacy, human review, Memory approval, Proposal approval, or AgentIdentity lifecycle restrictions.\n',
   "references/privacy-and-safety.md": `# Privacy And Safety
 
 Kitman is durable shared state. Treat every SessionUpdate, Memory proposal, ContextPack, and handoff as something future humans and Agents may read.

package/dist/index.js

@@ -14,6 +14,6 @@ if (args[0] === "srt") {
   const { runOpencodeReader } = await import("./chunk-9zd52pda.js");
   runOpencodeReader();
 } else {
-  const { runCli } = await import("./chunk-5aebee0q.js");
+  const { runCli } = await import("./chunk-vt7p2dqj.js");
   runCli(args);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kitman-sh/cli",
-  "version": "0.10.78",
+  "version": "0.10.79",
   "type": "module",
   "license": "UNLICENSED",
   "bin": {